@sixb/core 0.1.20 → 0.1.22

package/dist/artifacts/serialize-query.d.ts

@@ -0,0 +1,12 @@
+import { type SerializedExpandedObject } from "../objects/serialize";
+import type { ArtifactFacetsQueryResult, ArtifactObjectsQueryResult, ArtifactQueryResult } from "./queries";
+export type SerializedArtifactQueryResult = (Omit<ArtifactObjectsQueryResult, "objects"> & {
+    readonly objects: readonly SerializedExpandedObject[];
+}) | ArtifactFacetsQueryResult;
+/**
+ * An artifact query's result as `GET /api/artifacts/:id/versions/:v/queries/:name` answers it, and
+ * as a page's `sixb.query` resolves: its rows as the query route serializes them, or its facets.
+ * The route and the Agent's layout check both serve it, so a page reads the same JSON in either.
+ */
+export declare function serializeArtifactQueryResult(result: ArtifactQueryResult): SerializedArtifactQueryResult;
+//# sourceMappingURL=serialize-query.d.ts.map

package/dist/artifacts/serialize-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize-query.d.ts","sourceRoot":"","sources":["../../src/artifacts/serialize-query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,wBAAwB,EAA2B,MAAM,sBAAsB,CAAA;AAC7F,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,WAAW,CAAA;AAElB,MAAM,MAAM,6BAA6B,GACrC,CAAC,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,GAAG;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAA;CACtD,CAAC,GACF,yBAAyB,CAAA;AAE7B;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,mBAAmB,GAC1B,6BAA6B,CAI/B"}

package/dist/artifacts/sheet-rules.d.ts

@@ -0,0 +1,26 @@
+import type { CsvTable } from "./csv";
+import { type Workbook, type WorkbookSheet } from "./workbook";
+/**
+ * Whether a sheet's workbook and tables keep the rules publishing holds them to, whatever their
+ * cells hold: columns named once, every column the workbook names in its table, formulas that
+ * compute their columns, and charts that plot what they can draw. Returns the first rule broken,
+ * in the words publishing refuses the version with, or null. A sheet without a table here is not
+ * checked, nor a chart on it, so an editor can check only the sheet it changed.
+ */
+export declare function checkSheet(workbook: Workbook, tables: ReadonlyMap<string, CsvTable>): string | null;
+/**
+ * A table's header and size against its sheet: named, unique, and holding what the sheet names. A
+ * live sheet's header is the columns its workbook lists.
+ */
+export declare function sheetColumnsProblem(sheet: WorkbookSheet, table: CsvTable): string | null;
+/**
+ * Each computed column's formula against the columns it reads: it reads, its result fits the
+ * column, and no columns compute from each other.
+ */
+export declare function sheetFormulasProblem(sheet: WorkbookSheet, table: CsvTable): string | null;
+/**
+ * Each chart against its sheet: the columns it plots exist and are numbers, its right axis reads
+ * one kind, and a pie has few enough slices to tell apart.
+ */
+export declare function sheetChartsProblem(workbook: Workbook, tables: ReadonlyMap<string, CsvTable>): string | null;
+//# sourceMappingURL=sheet-rules.d.ts.map

package/dist/artifacts/sheet-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sheet-rules.d.ts","sourceRoot":"","sources":["../../src/artifacts/sheet-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAWrC,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,aAAa,EACnB,MAAM,YAAY,CAAA;AAEnB;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,GACpC,MAAM,GAAG,IAAI,CAUf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAuCxF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAqCzF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,GACpC,MAAM,GAAG,IAAI,CA2Cf"}

package/dist/artifacts/theme.d.ts

@@ -0,0 +1,19 @@
+/** An artifact may carry this file at its root to override the app's theme. */
+export declare const ARTIFACT_THEME_FILE = "theme.json";
+/**
+ * An artifact's own theme. `mode` pins light or dark whatever the viewer's app uses; `tokens`
+ * override the app's values for the names in {@link ARTIFACT_THEME_TOKENS}.
+ */
+export interface ArtifactTheme {
+    readonly mode?: "light" | "dark";
+    readonly tokens?: Readonly<Record<string, string>>;
+}
+/** The tokens a theme may set. Every other app token stays the app's. */
+export declare const ARTIFACT_THEME_TOKENS: readonly string[];
+/** Reads a `theme.json`. Returns the reason it was refused, in words the author can act on. */
+export declare function parseArtifactTheme(text: string): {
+    readonly theme: ArtifactTheme;
+} | {
+    readonly error: string;
+};
+//# sourceMappingURL=theme.d.ts.map

package/dist/artifacts/theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../src/artifacts/theme.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,eAAe,CAAA;AAE/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACnD;AAsBD,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAIlD,CAAA;AAWD,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA2ChE"}

package/dist/artifacts/tones.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The colors an artifact gives what it marks, a sheet's tag or a canvas's note: the theme's
+ * meanings, or one of its chart colors, so they follow the app's theme and dark mode.
+ */
+export declare const ARTIFACT_TONES: readonly ["neutral", "positive", "warning", "negative", "chart-1", "chart-2", "chart-3", "chart-4", "chart-5"];
+export type ArtifactTone = (typeof ARTIFACT_TONES)[number];
+export declare function isArtifactTone(value: unknown): value is ArtifactTone;
+//# sourceMappingURL=tones.d.ts.map

package/dist/artifacts/tones.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tones.d.ts","sourceRoot":"","sources":["../../src/artifacts/tones.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,cAAc,gHAUjB,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}

package/dist/artifacts/warnings.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Something about a published version worth fixing that did not stop it from publishing. A warning
+ * names the part it concerns, so a viewer can point at it.
+ */
+export interface ArtifactWarning {
+    readonly code: string;
+    readonly message: string;
+    /** The slide, sheet, section, or file the warning is about. */
+    readonly part?: string;
+}
+//# sourceMappingURL=warnings.d.ts.map

package/dist/artifacts/warnings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warnings.d.ts","sourceRoot":"","sources":["../../src/artifacts/warnings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/dist/artifacts/workbook.d.ts

@@ -0,0 +1,135 @@
+import { type ArtifactTone } from "./tones";
+/**
+ * A sheet artifact is `workbook.json` and one CSV per sheet under `sheets/`. The CSV holds the
+ * values; the workbook holds what CSV can't: sheet order, column types and formats, frozen rows
+ * and columns, widths, descriptions and totals, computed columns' formulas, and charts drawn from
+ * the sheets. A live sheet has no CSV: its rows are one of the version's queries', as each reader
+ * reads them.
+ */
+export declare const WORKBOOK_FILE = "workbook.json";
+export declare const SHEET_COLUMN_TYPES: readonly ["text", "number", "currency", "percent", "date", "link", "image", "boolean", "tag"];
+export type SheetColumnType = (typeof SHEET_COLUMN_TYPES)[number];
+/** Column types whose cells are numbers, so a chart can plot them and a range can sum them. */
+export declare const NUMERIC_COLUMN_TYPES: readonly SheetColumnType[];
+/**
+ * How a numeric column's cells are shaded by value, across the column: a bar in the cell, a
+ * shade from light to dark, or two colors either side of zero.
+ */
+export declare const SHEET_HIGHLIGHTS: readonly ["bars", "scale", "diverging"];
+export type SheetHighlight = (typeof SHEET_HIGHLIGHTS)[number];
+/** What a sheet's totals row shows under a column, over the rows the reader sees. */
+export declare const SHEET_TOTALS: readonly ["sum", "average", "min", "max", "count"];
+export type SheetTotal = (typeof SHEET_TOTALS)[number];
+export declare const SHEET_CHART_TYPES: readonly ["bar", "line", "area", "pie", "scatter"];
+export type SheetChartType = (typeof SHEET_CHART_TYPES)[number];
+/** How a chart summarizes rows that share an x value: one point or slice for each value. */
+export declare const SHEET_CHART_AGGREGATES: readonly ["sum", "average", "count"];
+export type SheetChartAggregate = (typeof SHEET_CHART_AGGREGATES)[number];
+export interface SheetColumnFormat {
+    readonly type: SheetColumnType;
+    /** An ISO 4217 code, for a currency column. */
+    readonly currency?: string;
+    /** Digits after the decimal point, for numbers, currencies, and percents. */
+    readonly decimals?: number;
+    /** `1.2M` for `1,204,330`, for numbers and currencies. */
+    readonly compact?: boolean;
+    /** A sign on positive values too, `+3.2%`, for numbers, currencies, and percents. */
+    readonly signed?: boolean;
+    /** A tag column's colors by value; a value not named is neutral. */
+    readonly tones?: Readonly<Record<string, ArtifactTone>>;
+    /** How a numeric column's cells are shaded by value. */
+    readonly highlight?: SheetHighlight;
+    /** The formula that computes the column's every value, as an Excel table's column does. */
+    readonly formula?: string;
+}
+export interface WorkbookSheet {
+    readonly name: string;
+    /** Rows that stay in view as the sheet scrolls, the header row included. */
+    readonly frozenRows: number;
+    /** Columns that stay in view as the sheet scrolls sideways. */
+    readonly frozenColumns: number;
+    /** Formats by column name; a column not named here is text. */
+    readonly columns: Readonly<Record<string, SheetColumnFormat>>;
+    /** Widths in pixels by column name. */
+    readonly widths: Readonly<Record<string, number>>;
+    /** What a column means, shown on its header, by column name. */
+    readonly descriptions: Readonly<Record<string, string>>;
+    /** A totals row pinned under the rows: what each named column totals to. */
+    readonly totals: Readonly<Record<string, SheetTotal>>;
+    /** Where a live sheet's rows and columns come from; a sheet without it holds its CSV's. */
+    readonly live?: LiveSheetSource;
+}
+/**
+ * A live sheet's query and columns. Its columns are exactly those its workbook lists, in order,
+ * each showing a property of the rows or computed by a formula. A column whose type is its
+ * property's has no format in `columns` until the property's type is known: `liveSheetColumns`
+ * reads it then.
+ */
+export interface LiveSheetSource {
+    /** The query whose rows the sheet shows: `queries/<name>.json` in the version. */
+    readonly query: string;
+    readonly columns: readonly LiveSheetColumnSource[];
+}
+export interface LiveSheetColumnSource {
+    readonly name: string;
+    /**
+     * The property the column shows: a property id of the rows, or `<linkId>.<propertyId>` of a
+     * link the query expands. A computed column has none.
+     */
+    readonly from?: string;
+    /** The column's format as written, when it gives no type: its property's type is its type. */
+    readonly untyped?: Readonly<Record<string, unknown>>;
+}
+export interface WorkbookChart {
+    /** What `#chart=<name>` names in an address; lowercase letters, digits, and hyphens. */
+    readonly name: string;
+    readonly type: SheetChartType;
+    readonly sheet: string;
+    /** The column along the x axis, or a pie's slice labels. */
+    readonly x: string;
+    /**
+     * The plotted columns: one series each, or a pie's one value column. Empty for a chart that
+     * counts rows.
+     */
+    readonly y: readonly string[];
+    /** A bar chart's columns drawn as lines over its bars. */
+    readonly line: readonly string[];
+    /** Rows summarized by their x value, in the order the values first appear. */
+    readonly aggregate?: SheetChartAggregate;
+    readonly title?: string;
+    /** Stack a bar or area chart's series. */
+    readonly stacked: boolean;
+}
+export interface Workbook {
+    readonly sheets: readonly WorkbookSheet[];
+    readonly charts: readonly WorkbookChart[];
+}
+/** Where a sheet's values are, in the artifact. */
+export declare function sheetFilePath(sheetName: string): string;
+/**
+ * Reads `workbook.json` into its full form: `"Revenue": "currency"` becomes
+ * `{ type: "currency" }`, a single `y` becomes a list, and defaults are filled. Returns what is
+ * wrong in words the author can act on. Whether the columns exist is checked against the CSVs, and
+ * a live sheet's against its query.
+ */
+export declare function parseWorkbook(text: string): {
+    readonly workbook: Workbook;
+} | {
+    readonly error: string;
+};
+/** A number as a sheet stores it: plain digits, an optional sign, decimals, and exponent. */
+export declare function parseSheetNumber(value: string): number | undefined;
+/** A date as a sheet stores it: `YYYY-MM-DD`, optionally with an ISO 8601 time. */
+export declare function parseSheetDate(value: string): Date | undefined;
+/** Why a column can't have its total, or null: only a numeric column has more than a count. */
+export declare function sheetTotalProblem(sheetAt: string, column: string, total: SheetTotal, type: SheetColumnType): string | null;
+/**
+ * A column's format as `columns` writes it, for a column whose type `type` gives when the format
+ * names none: a live column's property's. Returns what is wrong in the words parsing uses.
+ */
+export declare function readSheetColumnFormat(value: Readonly<Record<string, unknown>>, at: string, type: SheetColumnType): {
+    readonly format: SheetColumnFormat;
+} | {
+    readonly error: string;
+};
+//# sourceMappingURL=workbook.d.ts.map

package/dist/artifacts/workbook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workbook.d.ts","sourceRoot":"","sources":["../../src/artifacts/workbook.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,YAAY,EAAkB,MAAM,SAAS,CAAA;AAE3E;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,kBAAkB,+FAUrB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjE,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAAsC,CAAA;AAEjG;;;GAGG;AACH,eAAO,MAAM,gBAAgB,yCAA0C,CAAA;AACvE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,qFAAqF;AACrF,eAAO,MAAM,YAAY,oDAAqD,CAAA;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtD,eAAO,MAAM,iBAAiB,oDAAqD,CAAA;AACnF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,sCAAuC,CAAA;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;IACvD,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC7D,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACvD,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;IACrD,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAA;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAA;CACnD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAC1C;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa9D;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKlE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAO9D;AAwJD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,eAAe,GACpB,MAAM,GAAG,IAAI,CAGf;AA+ED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOrE"}

package/dist/auth/index.d.ts

@@ -8,7 +8,7 @@ export { AuthRuntimeError, SignInRefusedError } from "./errors";
 export type { AuthRuntimeOptions } from "./runtime";
 export { AuthRuntime, DEFAULT_AUTH_INVITATION_TTL_MS, DEFAULT_AUTH_SESSION_CACHE_TTL_MS, DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS, DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS, MAX_AUTH_INVITATION_TTL_MS, resolveAuthConfig, } from "./runtime";
 export { createSessionCredential, formatSessionCookieValue, generateSessionSecret, hashSessionSecret, parseSessionCookieValue, } from "./sessions";
-export type { AuthCookieOptions, AuthCredentialSource, AuthEmailDeliveryStatus, AuthenticatedAuthSession, AuthenticatedRequestAuthSession, AuthenticatedServiceAccountAccessTokenSession, AuthenticatedUserAccessTokenSession, AuthenticatedUserRequestSession, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthSessionFailureReason, AuthSessionOptions, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, AuthStrategyKind, CreateAccessTokenResult, CreateInvitationCapability, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationDestination, InvitationGroupOption, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, MemberCapabilities, MemberSummary, MembershipCapabilities, MembershipOperationCapabilities, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, Principal, ReactivateMemberInput, ReactivateMemberResult, ResolvedAuthConfig, RevealedInvitationLink, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, ServiceAccountWithGroups, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UnauthenticatedAuthSession, UpdateMemberGroupsInput, UpdateMemberGroupsResult, } from "./types";
+export type { AuthCookieOptions, AuthCredentialSource, AuthEmailDeliveryStatus, AuthenticatedAuthSession, AuthenticatedRequestAuthSession, AuthenticatedServiceAccountAccessTokenSession, AuthenticatedUserAccessTokenSession, AuthenticatedUserRequestSession, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthSessionFailureReason, AuthSessionOptions, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, AuthStrategyKind, CreateAccessTokenResult, CreateInvitationCapability, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationDestination, InvitationGroupOption, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, MemberCapabilities, MemberSummary, MembershipCapabilities, MembershipOperationCapabilities, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, OwnProfile, Principal, ProfileField, ReactivateMemberInput, ReactivateMemberResult, ResolvedAuthConfig, RevealedInvitationLink, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, ServiceAccountWithGroups, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UnauthenticatedAuthSession, UpdateMemberGroupsInput, UpdateMemberGroupsResult, UpdateOwnProfileInput, UserPrincipal, } from "./types";
 export { principalsEqual, SYSTEM_PRINCIPAL } from "./types";
 export { isInvitationDeliveryAuthStrategy, isMagicLinkAuthStrategy, isOidcAuthStrategy, } from "./validation";
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,mCAAmC,GACpC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,QAAQ,CAAA;AACf,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,6CAA6C,EAC7C,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,+BAA+B,EAC/B,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACT,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,mCAAmC,GACpC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,QAAQ,CAAA;AACf,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,6CAA6C,EAC7C,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,+BAA+B,EAC/B,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}

package/dist/auth/index.js

@@ -23,10 +23,12 @@ import {
   AuthRuntime2,
   SYSTEM_PRINCIPAL2,
   principalsEqual2
-} from "../chunk-vpq4shxz.js";
-import"../chunk-c85m1hyj.js";
-import"../chunk-v9xd5wzd.js";
-import"../chunk-es1gxsbf.js";
+} from "../chunk-h3pbv7n8.js";
+import"../chunk-6n69k945.js";
+import"../chunk-cdk3egjj.js";
+import"../chunk-bab05bhg.js";
+import"../chunk-zrvhsq7f.js";
+import"../chunk-73v685wb.js";
 import {
   DEFAULT_SESSION_COOKIE_NAME2,
   DEFAULT_CSRF_COOKIE_NAME2,
@@ -50,14 +52,15 @@ import {
   isMagicLinkAuthStrategy2,
   isInvitationDeliveryAuthStrategy2,
   isOidcAuthStrategy2
-} from "../chunk-hcbyfxbe.js";
-import"../chunk-d0bqz29d.js";
-import"../chunk-v4jbb3rs.js";
-import"../chunk-hvsb78a1.js";
-import"../chunk-gsjm1wms.js";
-import"../chunk-jhm3zsa7.js";
-import"../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+} from "../chunk-5grk14e5.js";
+import"../chunk-yc9ners4.js";
+import"../chunk-rap5w0x0.js";
+import"../chunk-65pyhyas.js";
+import"../chunk-4y26vs3v.js";
+import"../chunk-vhbw5sqm.js";
+import"../chunk-zbc929zg.js";
+import"../chunk-6eqsgvxk.js";
+import"../chunk-wkv3h3q7.js";
 export {
   AuthRuntime2 as AuthRuntime,
   AuthRuntimeError2 as AuthRuntimeError,
@@ -106,4 +109,4 @@ export {
   verifyDoubleSubmitCsrf2 as verifyDoubleSubmitCsrf
 };
 
-//# debugId=8FFA124180A4D74264756E2164756E21
+//# debugId=F29DEBB720E424FF64756E2164756E21

package/dist/auth/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "8FFA124180A4D74264756E2164756E21",
+  "debugId": "F29DEBB720E424FF64756E2164756E21",
   "names": []
 }

package/dist/auth/member-events.d.ts

@@ -0,0 +1,13 @@
+import type { EventDraft } from "../events/types";
+import type { CompleteSignInResult, InvitationRecord, UserRecord } from "../storage/auth";
+import type { AuthenticatedUserRequestSession } from "./types";
+/**
+ * What a completed sign-in tells the project: a new member, or the profile their identity provider
+ * changed. A sign-in that changed nothing tells nothing.
+ */
+export declare function signInEvents(result: CompleteSignInResult): readonly EventDraft[];
+/** A member edited their own profile. Saving the values it already had tells nothing. */
+export declare function profileUpdatedEvents(caller: AuthenticatedUserRequestSession, previousUser: UserRecord, user: UserRecord): readonly EventDraft[];
+export declare function statusChangedEvents(caller: AuthenticatedUserRequestSession, previousUser: UserRecord, user: UserRecord): readonly EventDraft[];
+export declare function invitedEvents(caller: AuthenticatedUserRequestSession, invitation: InvitationRecord): readonly EventDraft[];
+//# sourceMappingURL=member-events.d.ts.map

package/dist/auth/member-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-events.d.ts","sourceRoot":"","sources":["../../src/auth/member-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAA2C,MAAM,iBAAiB,CAAA;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEzF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAA;AAI9D;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,SAAS,UAAU,EAAE,CAoBhF;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,+BAA+B,EACvC,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,UAAU,GACf,SAAS,UAAU,EAAE,CAUvB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,+BAA+B,EACvC,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,UAAU,GACf,SAAS,UAAU,EAAE,CASvB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,+BAA+B,EACvC,UAAU,EAAE,gBAAgB,GAC3B,SAAS,UAAU,EAAE,CAYvB"}

package/dist/auth/profile.d.ts

@@ -0,0 +1,11 @@
+import type { UpdateOwnProfileInput } from "./types";
+/** Validate the changes a person makes to their own profile. An empty value clears the field. */
+export declare function normalizeProfileChanges(input: UpdateOwnProfileInput): UpdateOwnProfileInput;
+/**
+ * A name a sign-in supplies, such as one an identity provider sent, held to the rules a person's own
+ * name follows. A value that breaks them counts as not sent, so it never makes a sign-in fail.
+ */
+export declare function signInDisplayName(value: unknown): string | undefined;
+/** A picture a sign-in supplies, treated as {@link signInDisplayName} treats a name. */
+export declare function signInAvatarUrl(value: unknown): string | undefined;
+//# sourceMappingURL=profile.d.ts.map

package/dist/auth/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/auth/profile.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAcpD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,GAAG,qBAAqB,CAkB3F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElE"}

package/dist/auth/runtime.d.ts

@@ -1,16 +1,19 @@
 import { type AuthorizationContext } from "../authorization";
+import type { DomainEventLog } from "../events/service";
 import { type GroupReference, type SecurityDefinitionCatalog } from "../security";
 import type { Storage } from "../storage";
-import { type CompleteDeviceAuthorizationInput, type SessionRecord } from "../storage/auth";
+import { type CreateAuthSessionInput, type SessionRecord } from "../storage/auth";
 import { type ResolvedAuthCookieOptions } from "./cookies";
 import { type BearerSessionTokens } from "./sessions";
-import type { AuthenticatedRequestAuthSession, AuthenticatedUserRequestSession, AuthRequestResult, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, CreateAccessTokenResult, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDestination, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MembershipCapabilities, ReactivateMemberInput, ReactivateMemberResult, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UpdateMemberGroupsInput, UpdateMemberGroupsResult } from "./types";
+import type { AuthenticatedRequestAuthSession, AuthenticatedUserRequestSession, AuthRequestResult, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, CreateAccessTokenResult, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDestination, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkCallbackInput, MagicLinkCallbackResult, MembershipCapabilities, OidcCallbackInput, OidcCallbackResult, OwnProfile, ReactivateMemberInput, ReactivateMemberResult, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UpdateMemberGroupsInput, UpdateMemberGroupsResult, UpdateOwnProfileInput } from "./types";
 export { DEFAULT_AUTH_INVITATION_TTL_MS, DEFAULT_AUTH_SESSION_CACHE_TTL_MS, DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS, DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS, MAX_AUTH_INVITATION_TTL_MS, resolveAuthConfig, } from "./validation";
 export interface AuthRuntimeOptions {
     readonly projectId: string;
     readonly storage: Storage;
     readonly security: SecurityDefinitionCatalog;
     readonly config?: SixbAuthConfig;
+    /** Where member events go: joined, suspended, reactivated, invited, profile updated. */
+    readonly events: DomainEventLog;
 }
 export declare class AuthRuntime {
     private readonly projectId;
@@ -18,6 +21,7 @@ export declare class AuthRuntime {
     private readonly security;
     private readonly config;
     private readonly sessionCache;
+    private readonly events;
     constructor(options: AuthRuntimeOptions);
     isEnabled(): boolean;
     getStrategy(): AuthStrategy | null;
@@ -49,7 +53,9 @@ export declare class AuthRuntime {
         readonly clientName: string;
         readonly now: Date;
     }): {
-        readonly session: CompleteDeviceAuthorizationInput["session"];
+        readonly session: CreateAuthSessionInput & {
+            readonly bearer: NonNullable<CreateAuthSessionInput["bearer"]>;
+        };
         readonly tokens: BearerSessionTokens;
     };
     /**
@@ -67,6 +73,14 @@ export declare class AuthRuntime {
     private loadActiveUser;
     private touchSessionLastSeen;
     private touchAccessTokenLastUsed;
+    /**
+     * Finish a magic-link sign-in: consume the link and start the session the server minted. Every
+     * sign-in goes through the runtime, so what follows one is decided here and not in each route.
+     * A name that breaks the profile rules is dropped: it never makes the sign-in fail.
+     */
+    completeMagicLinkSignIn(input: Pick<MagicLinkCallbackInput, "magicLinkId" | "token" | "session" | "displayName">): Promise<MagicLinkCallbackResult>;
+    /** Finish an OIDC sign-in from the provider's callback and start the session the server minted. */
+    completeOidcSignIn(input: Pick<OidcCallbackInput, "requestUrl" | "requestOrigin" | "session">): Promise<OidcCallbackResult>;
     /**
      * Resolve a caller's authorization context. Grants resolve eagerly
      * (`groups -> roles -> grants`, subtype-expanded), so checks against it are synchronous.
@@ -108,6 +122,14 @@ export declare class AuthRuntime {
     updateMemberGroups(caller: AuthenticatedUserRequestSession, input: UpdateMemberGroupsInput): Promise<UpdateMemberGroupsResult>;
     suspendMember(caller: AuthenticatedUserRequestSession, input: SuspendMemberInput): Promise<SuspendMemberResult>;
     reactivateMember(caller: AuthenticatedUserRequestSession, input: ReactivateMemberInput): Promise<ReactivateMemberResult>;
+    /** The caller's own profile, and which of its fields their identity provider manages. */
+    getProfile(caller: AuthenticatedUserRequestSession): Promise<OwnProfile>;
+    /**
+     * Change the caller's own name or picture. A field their identity provider manages is refused,
+     * because the next sign-in would overwrite it.
+     */
+    updateProfile(caller: AuthenticatedUserRequestSession, input: UpdateOwnProfileInput): Promise<OwnProfile>;
+    private managedProfileFields;
     /** The caller's active sessions, most recently active first. */
     listSessions(caller: AuthenticatedUserRequestSession): Promise<readonly SessionRecord[]>;
     /**
@@ -131,6 +153,12 @@ export declare class AuthRuntime {
     invite(caller: AuthenticatedUserRequestSession, input: InviteUserInput, destination: InvitationDestination): Promise<InviteUserResult>;
     listInvitations(caller: AuthenticatedUserRequestSession, input?: ListInvitationsInput): Promise<ListInvitationsResult>;
     revokeInvitation(caller: AuthenticatedUserRequestSession, input: RevokeInvitationInput): Promise<RevokeInvitationResult>;
+    /**
+     * Member events follow the auth write that caused them, which has already committed. Auth
+     * storage keeps no outbox, so an event the broker refuses is reported through `onError` and lost:
+     * delivery is at most once.
+     */
+    private emitMemberEvents;
     private requireAuthStorage;
     private resolveInviteGroupIds;
     private resolveMembershipPolicyScopeForUser;

package/dist/auth/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/auth/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,oBAAoB,EAA+B,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAEL,KAAK,cAAc,EAKnB,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAIL,KAAK,gCAAgC,EAKrC,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AASxB,OAAO,EAAa,KAAK,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAGrE,OAAO,EACL,KAAK,mBAAmB,EAOzB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAEV,+BAA+B,EAC/B,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAE1B,qBAAqB,EAKrB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EAEzB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EAEtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EAEnB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,SAAS,CAAA;AAShB,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAarB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;gBAEtC,OAAO,EAAE,kBAAkB;IAgBvC,SAAS,IAAI,OAAO;IAKpB,WAAW,IAAI,YAAY,GAAG,IAAI;IAIlC,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG;QACjC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;QACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAA;KAClC;IAUD,gBAAgB,IAAI,yBAAyB;IAI7C,kBAAkB,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAgC5D,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAA;KAAE,GACjF,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;KAAE,GAC3E,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,iBAAiB,CAAC;YA2Bf,oBAAoB;YAoEpB,oBAAoB;IAiClC,4FAA4F;YAC9E,mBAAmB;IA8BjC;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG;QACF,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAA;QAC7D,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;KACrC;IAsBD;;;OAGG;IACG,cAAc,CAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAyB5F,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,0BAA0B;YASpB,yBAAyB;IAwEvC,iFAAiF;YACnE,cAAc;YA6Bd,oBAAoB;YAgBpB,wBAAwB;IAwBtC;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,GAAG,oBAAoB;IAS5E,wBAAwB,CAC5B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAcpC,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAyB7B,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IA0B7B,mBAAmB,CACvB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,yBAAyB,CAAC;IA4B/B,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC;IAgChC,qBAAqB,CACzB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC;IAiBjC,8BAA8B,CAClC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,oCAAoC,CAAC;IAmB1C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IAqC3C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IA8BjD;;;;;;;OAOG;YACW,+BAA+B;YA+B/B,0BAA0B;IAWlC,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAiBtC;;;;;;;OAOG;IACH,yBAAyB,CAAC,KAAK,EAAE;QAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAA;KACjD,GAAG,sBAAsB;IAMpB,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAWhC,WAAW,CACf,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,gBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IA4CvB,kBAAkB,CACtB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IA4E9B,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,mBAAmB,CAAC;IA8BzB,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAsBlC,gEAAgE;IAC1D,YAAY,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAQ9F;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;IAgBnB,sEAAsE;IAChE,iBAAiB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;YACW,uBAAuB;IAyBrC,OAAO,CAAC,qBAAqB;IAavB,MAAM,CACV,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,gBAAgB,CAAC;IA+DtB,eAAe,CACnB,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAsB3B,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAiClC,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mCAAmC;IAO3C,OAAO,CAAC,iCAAiC;YAc3B,wBAAwB;YAwBxB,oCAAoC;IAYlD,OAAO,CAAC,6BAA6B;IAgBrC,OAAO,CAAC,mCAAmC;IAqB3C,OAAO,CAAC,+BAA+B;CAuBxC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/auth/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,oBAAoB,EAA+B,MAAM,kBAAkB,CAAA;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAEL,KAAK,cAAc,EAKnB,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAIL,KAAK,sBAAsB,EAK3B,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAUxB,OAAO,EAAa,KAAK,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAUrE,OAAO,EACL,KAAK,mBAAmB,EAOzB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAEV,+BAA+B,EAC/B,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAE1B,qBAAqB,EAKrB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EAEvB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EAEV,qBAAqB,EACrB,sBAAsB,EAEtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EAEnB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAWhB,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAerB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,OAAO,EAAE,kBAAkB;IAiBvC,SAAS,IAAI,OAAO;IAKpB,WAAW,IAAI,YAAY,GAAG,IAAI;IAIlC,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG;QACjC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;QACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAA;KAClC;IAUD,gBAAgB,IAAI,yBAAyB;IAI7C,kBAAkB,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAgC5D,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAA;KAAE,GACjF,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;KAAE,GAC3E,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,iBAAiB,CAAC;YA2Bf,oBAAoB;YAoEpB,oBAAoB;IAiClC,4FAA4F;YAC9E,mBAAmB;IA8BjC;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG;YACzC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAA;SAC/D,CAAA;QACD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;KACrC;IAsBD;;;OAGG;IACG,cAAc,CAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAyB5F,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,0BAA0B;YASpB,yBAAyB;IAwEvC,iFAAiF;YACnE,cAAc;YA6Bd,oBAAoB;YAgBpB,wBAAwB;IAwBtC;;;;OAIG;IACG,uBAAuB,CAC3B,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC,GACvF,OAAO,CAAC,uBAAuB,CAAC;IAuBnC,mGAAmG;IAC7F,kBAAkB,CACtB,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,CAAC,GACzE,OAAO,CAAC,kBAAkB,CAAC;IA0B9B;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,GAAG,oBAAoB;IAS5E,wBAAwB,CAC5B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAcpC,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAyB7B,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IA0B7B,mBAAmB,CACvB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,yBAAyB,CAAC;IA4B/B,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC;IAgChC,qBAAqB,CACzB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC;IAiBjC,8BAA8B,CAClC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,oCAAoC,CAAC;IAmB1C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IAqC3C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IA8BjD;;;;;;;OAOG;YACW,+BAA+B;YA+B/B,0BAA0B;IAWlC,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAiBtC;;;;;;;OAOG;IACH,yBAAyB,CAAC,KAAK,EAAE;QAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAA;KACjD,GAAG,sBAAsB;IAMpB,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAWhC,WAAW,CACf,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,gBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IA4CvB,kBAAkB,CACtB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IA4E9B,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,mBAAmB,CAAC;IAgCzB,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAwBlC,yFAAyF;IACnF,UAAU,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,UAAU,CAAC;IAgB9E;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,UAAU,CAAC;YAmCR,oBAAoB;IAuBlC,gEAAgE;IAC1D,YAAY,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAQ9F;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;IAgBnB,sEAAsE;IAChE,iBAAiB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;YACW,uBAAuB;IAyBrC,OAAO,CAAC,qBAAqB;IAavB,MAAM,CACV,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,gBAAgB,CAAC;IA6DtB,eAAe,CACnB,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAsB3B,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAiClC;;;;OAIG;YACW,gBAAgB;IAM9B,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mCAAmC;IAO3C,OAAO,CAAC,iCAAiC;YAc3B,wBAAwB;YAwBxB,oCAAoC;IAYlD,OAAO,CAAC,6BAA6B;IAgBrC,OAAO,CAAC,mCAAmC;IAqB3C,OAAO,CAAC,+BAA+B;CAuBxC"}

package/dist/auth/strategy.d.ts

@@ -6,8 +6,10 @@
  * `./index` carries. Strategy authors should not need anything beyond this
  * entry plus the storage contracts from `@sixb/core/storage`.
  */
+export type { UserIdentityRecord } from "../storage/auth";
 export type { SignInRefusalReason } from "./errors";
 export { SignInRefusedError } from "./errors";
-export type { AuthEmailDeliveryStatus, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthStrategy, AuthStrategyKind, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, RevealedInvitationLink, } from "./types";
+export { signInAvatarUrl, signInDisplayName } from "./profile";
+export type { AuthEmailDeliveryStatus, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthStrategy, AuthStrategyKind, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, ProfileField, RevealedInvitationLink, } from "./types";
 export { isInvitationDeliveryAuthStrategy, isMagicLinkAuthStrategy, isOidcAuthStrategy, } from "./validation";
 //# sourceMappingURL=strategy.d.ts.map

package/dist/auth/strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../src/auth/strategy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,YAAY,EACV,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../src/auth/strategy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC9D,YAAY,EACV,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,GACvB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}

package/dist/auth/strategy.js

@@ -1,15 +1,19 @@
 // @bun
 import {
   SignInRefusedError2,
+  signInDisplayName2,
+  signInAvatarUrl2,
   isMagicLinkAuthStrategy2,
   isInvitationDeliveryAuthStrategy2,
   isOidcAuthStrategy2
-} from "../chunk-hcbyfxbe.js";
+} from "../chunk-5grk14e5.js";
 export {
   SignInRefusedError2 as SignInRefusedError,
   isInvitationDeliveryAuthStrategy2 as isInvitationDeliveryAuthStrategy,
   isMagicLinkAuthStrategy2 as isMagicLinkAuthStrategy,
-  isOidcAuthStrategy2 as isOidcAuthStrategy
+  isOidcAuthStrategy2 as isOidcAuthStrategy,
+  signInAvatarUrl2 as signInAvatarUrl,
+  signInDisplayName2 as signInDisplayName
 };
 
-//# debugId=0814B8BAC08267AD64756E2164756E21
+//# debugId=FBAFB17D98B4860964756E2164756E21

package/dist/auth/strategy.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "0814B8BAC08267AD64756E2164756E21",
+  "debugId": "FBAFB17D98B4860964756E2164756E21",
   "names": []
 }